Revive-adserver vulnerabilities

Products

• Revive Adserver 66

Newest

• revive adserver, revive-adserver revive adserver +1 more A missing sanitisation vulnerability exists with user input in the stats-video.php script. The... CVE-2026-50745 4.7 MediumJune 26, 2026
• revive adserver, revive-adserver revive adserver +1 more A bypass to the admin‑only restriction of the XML‑RPC API in Revive Adserver 6.0.7. The API... CVE-2026-50744 4.3 MediumJune 26, 2026
• revive adserver, revive-adserver revive adserver +1 more A stored XSS vulnerabilities exists in the `maintenance-acl-check.php` and `maintenance-banners... CVE-2026-50742 4.4 MediumJune 26, 2026
• revive adserver, revive-adserver revive adserver +1 more Bypass to the fix for CVE-2026-34916. Variants of such vectors have been also reported by phucrio... CVE-2026-50741 8.8 HighJune 26, 2026
• revive adserver, revive-adserver revive adserver +1 more A missing sanitisation vulnerability of user input in the zone-include.php script exists in... CVE-2026-50740 6.1 MediumJune 26, 2026
• revive adserver, revive-adserver revive adserver +1 more A bypass for CVE‑2026‑34913 exists with proper ownership validation that had not been applied to... CVE-2026-50739 4.3 MediumJune 26, 2026
• revive-adserver revive adserver, revive-adserver +1 more Revive Adserver 5.4.1 Cross-Site Scripting via Banner Advanced Settings CVE-2023-53931 5.1 MediumDecember 17, 2025
• revive adserver, revive-adserver revive adserver +1 more Improper input neutralization in the stats-conversions.php script in Revive Adserver 5.5.2 and 6... CVE-2025-52668 8.7 HighNovember 20, 2025
• revive adserver, revive-adserver revive adserver +1 more Improper Neutralization of Input in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes a... CVE-2025-48987 6.3 MediumNovember 20, 2025
• revive adserver, revive-adserver revive adserver +1 more Authorization bypass in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes an logged in... CVE-2025-48986 8.8 HighNovember 20, 2025
• revive adserver, revive-adserver revive adserver +1 more Improper neutralisation of input in Revive Adserver 6.0.0+ causes a reflected XSS attack in the... CVE-2025-55124 6.1 MediumNovember 20, 2025
• revive adserver, revive-adserver revive adserver +1 more Improper neutralization of input in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes... CVE-2025-55123 3.5 LowNovember 20, 2025
• revive adserver, revive-adserver revive adserver +1 more Debug information disclosure in the SQL error message to in Revive Adserver 5.5.2 and 6.0.1 and... CVE-2025-52671 4.3 MediumNovember 20, 2025
• revive adserver, revive-adserver revive adserver +1 more Missing authorization check in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes users... CVE-2025-52670 7.1 HighNovember 20, 2025
• revive adserver, revive-adserver revive adserver +1 more Insecure design policies in the user management system of Revive Adserver 5.5.2 and 6.0.1 and... CVE-2025-52669 4.3 MediumNovember 20, 2025
• revive adserver, revive-adserver revive adserver +1 more Missing JSON Content-Type header in a script in Revive Adserver 6.0.1 and 5.5.2 and earlier... CVE-2025-52667 3.5 LowNovember 20, 2025
• revive adserver, revive-adserver revive adserver +1 more Improper neutralisation of format characters in the settings of Revive Adserver 5.5.2 and 6.0.1... CVE-2025-52666 2.7 LowNovember 20, 2025
• revive adserver, revive-adserver revive adserver +1 more A reflected Cross-Site Scripting (XSS) vulnerability has been identified in Revive Adserver... CVE-2025-27208 6.3 MediumOctober 30, 2025
• revive adserver, revive-adserver revive adserver +1 more SQL injection in Revive Adserver 6.0.0 causes potential disruption or information access when... CVE-2025-52664 8.8 HighOctober 30, 2025
• revive adserver, revive-adserver revive adserver +1 more A reflected XSS vulnerability exists in Revive Adserver 5.4.1 and earlier versions.. CVE-2023-38040 6.1 MediumSeptember 17, 2023
• revive-adserver revive adserver Vulnerability in the generation of session IDs in revive-adserver < 5.3.0, based on the... CVE-2021-22948 7.1 HighSeptember 23, 2021
• revive-adserver revive adserver Revive Adserver before v5.2.0 is vulnerable to a reflected XSS vulnerability in the ... CVE-2021-22889 EPSS 30.5% 6.1 MediumMarch 25, 2021
• revive-adserver revive adserver Revive Adserver before v5.2.0 is vulnerable to a reflected XSS vulnerability in the `status`... CVE-2021-22888 EPSS 16.3% 6.1 MediumMarch 25, 2021
• revive-adserver revive adserver Revive Adserver before 5.1.1 is vulnerable to a reflected XSS vulnerability in stats.php via the ... CVE-2021-22875 EPSS 18.5% 6.1 MediumJanuary 28, 2021
• revive-adserver revive adserver Revive Adserver before 5.1.1 is vulnerable to a reflected XSS vulnerability in userlog-index.php... CVE-2021-22874 EPSS 18.5% 6.1 MediumJanuary 28, 2021
• revive-adserver revive adserver Revive Adserver before 5.1.0 permits any user with a manager account to store possibly malicious... CVE-2021-22871 4.8 MediumJanuary 21, 2021
• revive-adserver revive adserver Revive Adserver before 5.1.0 is vulnerable to a reflected cross-site scripting (XSS)... CVE-2021-22872 6.1 MediumJanuary 21, 2021
• revive-adserver revive adserver Revive Adserver before 5.1.0 is vulnerable to open redirects via the `dest`, `oadest`, and/or ... CVE-2021-22873 EPSS 69.6% 6.1 MediumJanuary 21, 2021
• revive-adserver revive adserver An Open Redirect vulnerability was discovered in Revive Adserver version < 5.0.5 and reported by... CVE-2020-8143 EPSS 70.4% 6.1 MediumApril 3, 2020
• revive-adserver revive adserver A security restriction bypass vulnerability has been discovered in Revive Adserver version < 5.0... CVE-2020-8142 6.8 MediumApril 3, 2020
• revive-adserver revive adserver A reflected XSS vulnerability has been discovered in the publicly accessible afr.php delivery... CVE-2020-8115 6.1 MediumFebruary 4, 2020
• revive adserver, revive-adserver revive adserver +1 more Use of cryptographically weak PRNG in the password recovery token generation of Revive Adserver <... CVE-2019-5440 8.1 HighMay 28, 2019
• revive adserver, revive-adserver revive adserver +1 more A user having access to the UI of a Revive Adserver instance could be tricked into clicking on a... CVE-2019-5433 5.4 MediumMay 6, 2019
• revive-adserver revive adserver Revive Adserver before 3.2.5 and 4.0.0 suffers from Reflected XSS. The Revive Adserver web... CVE-2016-9472 5.4 MediumMarch 28, 2017
• revive-adserver revive adserver Revive Adserver before 3.2.5 and 4.0.0 suffers from Special Element Injection. Usernames weren't... CVE-2016-9471 3.1 LowMarch 28, 2017
• revive-adserver revive adserver Revive Adserver before 3.2.5 and 4.0.0 suffers from Reflected File Download. `www/delivery... CVE-2016-9470 9.0 CriticalMarch 28, 2017
• revive-adserver revive adserver Revive Adserver before 3.2.3 suffers from Reflected XSS. `www/admin/stats.php` is vulnerable to... CVE-2016-9457 5.4 MediumMarch 28, 2017
• revive-adserver revive adserver Revive Adserver before 3.2.3 suffers from Cross-Site Request Forgery (CSRF). The Revive Adserver... CVE-2016-9456 8.8 HighMarch 28, 2017
• revive-adserver revive adserver Revive Adserver before 3.2.3 suffers from Cross-Site Request Forgery (CSRF). A number of scripts... CVE-2016-9455 8.8 HighMarch 28, 2017
• revive-adserver revive adserver Revive Adserver before 3.2.3 suffers from Persistent XSS. A vector for persistent XSS attacks via... CVE-2016-9454 5.4 MediumMarch 28, 2017
• revive-adserver revive adserver Revive Adserver before 3.2.3 suffers from Persistent XSS. A vector for persistent XSS attacks via... CVE-2016-9130 5.4 MediumMarch 28, 2017
• revive-adserver revive adserver Revive Adserver before 3.2.3 suffers from Information Exposure Through Discrepancy. It is... CVE-2016-9129 5.3 MediumMarch 28, 2017
• revive-adserver revive adserver Revive Adserver before 3.2.3 suffers from reflected XSS. The affiliate-preview.php script in www... CVE-2016-9128 5.4 MediumMarch 28, 2017
• revive-adserver revive adserver Revive Adserver before 3.2.3 suffers from Cross-Site Request Forgery (CSRF). The password... CVE-2016-9127 8.8 HighMarch 28, 2017
• revive-adserver revive adserver Revive Adserver before 3.2.3 suffers from persistent XSS. Usernames are not properly escaped when... CVE-2016-9126 5.4 MediumMarch 28, 2017
• revive-adserver revive adserver Revive Adserver before 3.2.3 suffers from session fixation, by allowing arbitrary session... CVE-2016-9125 9.8 CriticalMarch 28, 2017
• revive-adserver revive adserver Revive Adserver before 3.2.3 suffers from Improper Restriction of Excessive Authentication... CVE-2016-9124 9.8 CriticalMarch 28, 2017
• revive-adserver revive adserver Cross-site scripting (XSS) vulnerability in the invocation code generation for interstitial zones... CVE-2017-5833 6.1 MediumMarch 3, 2017
• revive-adserver revive adserver Cross-site scripting (XSS) vulnerability in Revive Adserver before 4.0.1 allows remote... CVE-2017-5832 5.4 MediumMarch 3, 2017
• revive-adserver revive adserver Session fixation vulnerability in the forgot password mechanism in Revive Adserver before 4.0.1,... CVE-2017-5831 5.9 MediumMarch 3, 2017
• Show olderLoading…